SHORT ANSWER
Because activation and review are two different steps in Shopify’s own terms. A Shopify Payments account can go live after identity checks, while the prohibited-business list, which in the United States is Stripe’s, applies whenever review happens. The terms let Shopify suspend or close the account “at any time, for any reason” and hold funds afterward.
This material is general educational information as of the “last reviewed” date. It is not legal advice and may not reflect later developments or facts specific to your business. Links are provided so readers can inspect the primary or official sources.
01 / THREE LAYERS
The platform, Shopify Payments, and third-party gateways are separate things
Shopify the platform hosts the store. Its Acceptable Use Policy is written as principles, not a product list: you cannot use it for anything illegal where you do business, and product-eligibility disputes mostly “originate from outside of Shopify.” Nothing on that page names peptides.
Shopify Payments is the built-in way to take cards. It has its own agreement, the Shopify Payments Terms of Service, and that agreement is where prohibited businesses, reserves, and termination live.
Third-party gateways installed from the app store carry their own policies from their own processors. A store can exist on Shopify with no Shopify Payments account at all. The question a peptide merchant is really asking is not “does Shopify allow this” but “which gateway’s policy am I under, and what does it say.”
02 / THE LIST
What the terms say about prohibited and restricted businesses
The Payments terms define two tiers. Prohibited Businesses are “prohibited from using the Payments Services.” Restricted Businesses “require additional review and approval by us.” The categories, the terms say, “may be imposed by law or through the Payment Network Rules,” by Shopify, or by a processor’s financial partners.
The list itself is not in the Shopify document. The terms send merchants to the Payment Processor List, and that page names the processors for each country. For the United States it lists Stripe, Inc. and PayPal, Inc., and under “Prohibited and Restricted Businesses” it links to “Stripe Prohibited and Restricted Businesses” and the PayPal Acceptable Use Policy.
So a Shopify Payments merchant in the US is under Stripe’s restricted-business list. That list, read the same day, includes “Incorrectly labeled research chemicals,” “Pseudo-pharmaceuticals or nutraceuticals that are not safe or make harmful claims,” and “Card-not-present prescription-only products and pharmaceuticals.” The word “peptide” does not appear on Stripe’s main list; Stripe addresses peptides on its FAQ page, covered in the Stripe guide linked below.
Two more sentences from the Shopify terms matter. The lists are “meant to be representative but not exhaustive.” And Shopify or the processors “may add to or update” them “at any time without notice to you.”
Processor terms change without notice. The quotes are what the pages said on the verification date; check the live pages before relying on any wording.
03 / THE MECHANISM
Activation is not the end of review
The eligibility section describes a sequence: Shopify collects business and owner information, verifies it, and “will review your account and determine if you are eligible.” Merchants are told when the account “has been either approved or deemed ineligible.” In practice that step turns on identity and business-registration data, which is why many stores are processing within a day.
The termination section is written separately and more broadly. Shopify may suspend or terminate “at any time, for any reason,” and the first listed example is a determination that the merchant “may be ineligible for the Payments Services because of the risk associated with your use.” A second example is non-compliance with the agreement or the processor terms, which is where the prohibited-business list attaches.
A third clause sits in the general rules: Shopify reserves the right not to process any transaction it believes “exposes you, Shopify, the Payment Processors, or any other third party to actual or potential risk.” None of these clauses require a dispute, a chargeback, or a complaint before they apply.
Put together, the terms describe a system where the account opens on verified identity and closes on category. A peptide catalog that was live at signup was not reviewed against the product list at signup; it was reviewed whenever Shopify or Stripe looked.
04 / FUNDS
What the terms say happens to money
Reserves are defined as funds “set aside to cover chargebacks, refunds, disputes, or other payment obligations.” Shopify sets the reserve terms “in our discretion,” which “may require that a certain amount (including the full amount)” of a transaction is held “for a period of time.” It may change those terms “at any time, for any reason,” including at a processor’s request. The merchant has “no legal interest in those funds.”
On closure, the merchant must complete pending transactions and stop taking new ones. Funds in the financial partner’s custody are paid out “subject to the Payment Processor Terms,” and a processor “may elect to continue to hold any funds deemed necessary” pending chargebacks, disputes, fees, refunds, “or other investigations or proceedings.”
No number of days appears anywhere in the Shopify terms for a reserve or a post-closure hold. The fund-hold guide linked below covers what each processor does and does not publish about duration.
05 / WHAT TO REVIEW
Review the storefront before relying on any gateway
Nothing in these terms is specific to one store, and none of it predicts what will happen to yours. What it does establish is that the gateway’s product list applies at any time, that the list is Stripe’s in the US, and that the storefront is what gets read against it.
That makes the same review worth doing before an application anywhere, and before assuming an already-live account will stay live:
- Product names, descriptions, and imagery: do any read as outcomes in people, brand equivalence, or dosing?
- Bundles and cross-sells: bacteriostatic water, syringes, and kits are administration context.
- Boundary language: where the research-use wording sits relative to the claims it is meant to qualify.
- Testimonials, reviews, blog posts, and linked social accounts on the same domain.
- Which gateway the store actually runs on, and that gateway’s current published list, dated.
QUESTIONS
Related questions
Does Shopify itself ban peptides?
Shopify’s Acceptable Use Policy names no products; it says you cannot sell what is illegal where you operate and points to the Payments terms and channel rules. The product list a US Shopify Payments merchant is under is Stripe’s, reached through Shopify’s Payment Processor List.
If my store was approved, doesn’t that mean it passed review?
The terms describe approval as an eligibility check after identity and business verification, and separately allow suspension or termination “at any time, for any reason,” including risk. Approval at signup is not a statement that the catalog was reviewed against the prohibited list.
Can I switch to a third-party gateway on Shopify and keep the same storefront?
You can install other gateways, and each has its own processor and its own list. This guide does not say any of them accept peptide stores. What every one of them reads is the same storefront, which is why the review above comes first.
SOURCES
Sources cited
Each source is listed with its class so government authority, agency guidance, enforcement examples, and private policy are never blended into one rule.
Eligibility review, Prohibited and Restricted Businesses, reserves, termination, and effects of termination. Read September 3, 2026.
Names Stripe, Inc. and PayPal, Inc. as US processors and links each processor’s prohibited and restricted businesses list.
Platform-level principles. Contains no product list; defers to the Payments terms and channel rules.
The list a US Shopify Payments merchant is under. Includes incorrectly labeled research chemicals and pseudo-pharmaceuticals lines quoted above.